Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/5F94B5287E1F11EEB18DE56B4AD9E6FC.roa
File: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (raw, json)
Hash identifier: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=
Subject key identifier: 13:26:C1:0E:9D:69:80:A0:3F:FD:BF:10:C7:54:7E:85:CB:9B:89:79
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 01D5
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/5F94B5287E1F11EEB18DE56B4AD9E6FC.roa
Signing time: Wed 08 Nov 2023 10:12:51 +0000
ROA not before: Wed 08 Nov 2023 10:12:48 +0000
ROA not after: Mon 22 Nov 2027 10:12:48 +0000
asID: 4809
IP address blocks: 2c0f:f7a8:9020::/48 maxlen: 48
2c0f:f7a8:9041::/48 maxlen: 48
2c0f:f7a8:9210::/48 maxlen: 48
2c0f:f7a8:9211::/48 maxlen: 48
2c0f:f7a8:9220::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Nov 8 10:12:48 2023 GMT
Not After : Nov 22 10:12:48 2027 GMT
Subject: CN=654b5f23-cbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:ee:2e:dc:79:93:7b:18:91:45:ee:6c:5e:
01:f9:82:e1:fa:9f:a0:73:0c:89:82:bf:e3:93:ed:
6a:6c:70:c3:c5:dc:00:ed:77:3b:15:1a:2c:c7:46:
b9:ff:d2:e9:7b:82:34:9c:b5:db:21:9f:17:e7:ff:
27:4b:9f:df:56:cf:3b:25:44:08:bd:09:f2:74:8e:
2e:a8:c7:68:80:71:c6:29:ba:30:8a:c2:53:76:ef:
65:ae:a1:95:91:89:7c:29:2a:08:66:b5:87:d5:f8:
60:50:95:68:67:4e:02:c4:89:df:91:f9:a0:6f:64:
31:56:ff:ca:cd:f3:75:8d:df:6f:62:1e:7c:58:f9:
f8:b1:01:40:69:ef:96:4e:77:be:d8:2c:0b:56:22:
01:91:1f:db:29:4b:44:9d:71:39:9b:db:63:91:da:
94:6b:8d:10:59:77:e2:6d:9a:1d:72:46:fd:85:30:
84:6e:eb:41:bf:15:6e:aa:39:18:f0:50:30:1d:13:
50:1c:f9:78:1c:74:c6:1d:3c:19:07:be:a7:b6:1d:
54:05:b9:e5:b8:8c:b3:cc:3f:e8:3c:b3:5d:78:c2:
55:70:d5:2c:8b:2e:99:39:38:e6:6c:d7:38:39:7c:
09:b6:76:23:c8:5d:ca:f9:5d:5b:83:b1:61:9b:76:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:C1:0E:9D:69:80:A0:3F:FD:BF:10:C7:54:7E:85:CB:9B:89:79
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/5F94B5287E1F11EEB18DE56B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f7a8:9020::/48
2c0f:f7a8:9041::/48
2c0f:f7a8:9210::/47
2c0f:f7a8:9220::/48
Signature Algorithm: sha256WithRSAEncryption
83:14:87:ba:4b:78:a8:5e:3c:47:b1:4a:92:e1:b2:ca:2e:9a:
63:f2:16:cd:11:8c:8b:a7:60:ac:cc:5f:b1:fe:95:20:4c:9d:
31:7f:78:06:2d:cf:06:25:26:3d:da:7f:0e:18:48:c1:05:99:
9b:d5:81:fa:9f:73:03:9e:92:cb:fe:85:51:c8:72:51:cf:47:
97:80:3e:e0:cd:63:39:78:1e:17:93:6e:5b:fb:ac:77:b7:45:
15:74:89:e3:14:d0:eb:b7:78:ec:e6:50:89:ed:28:b2:ff:07:
6b:2e:c4:ab:f4:ba:5a:91:8c:7b:88:fb:f2:3a:93:56:d9:c7:
fd:74:ec:f5:d5:a9:af:35:63:9a:0a:0b:bc:64:1e:2d:39:9c:
b5:e1:d8:84:5b:3d:68:4c:9a:65:2f:e0:2d:54:d9:ea:a4:5d:
38:cd:24:22:e7:49:af:06:45:bb:a0:36:ed:73:70:88:3d:c9:
cf:e0:70:c7:ec:f7:9b:8d:7b:2a:22:e2:b9:5f:a6:11:fe:46:
f2:d9:86:e6:4d:e8:83:db:31:41:1c:b6:4f:0c:84:50:8a:e8:
ef:e4:87:d3:10:6d:ef:ab:60:14:9f:15:13:a2:cf:34:fa:b7:
d3:b8:74:f4:21:c9:a9:da:e7:73:a5:a8:bd:d2:f6:89:c7:3d:
26:97:2f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:09:51 2024 by rpki-client on console-ams.rpki-client.org